Privacy Policy

1. Scope of This Policy

This Privacy Policy applies to:

• Users of the Pylon platform
• Visitors to Pylon-hosted websites
• Customers interacting with websites built on Pylon

Pylon operates as both:

• A data controller — for platform users
• A data processor — for customer websites

2. Information We Collect

2.1 Information You Provide

We may collect:

• Name and surname
• Email address
• Phone number
• Billing and payment information
• Account credentials
• Business information (if applicable)

2.2 Automatically Collected Information

When you use Pylon, we may collect:

• IP address
• Browser type
• Device information
• Operating system
• Usage data (pages visited, actions taken)
• Log files and diagnostic data

2.3 Payment Information

Payments are processed by Paystack. Pylon does not store full card details. Payment providers may collect and process your payment information in accordance with their own privacy policies.

2.4 Information Collected Through Customer Sites

Customers using Pylon may collect personal data from their own users, including customer names, email addresses, shipping information, and payment details. In such cases:

• The customer is the data controller
• Pylon acts as a data processor

3. How We Use Information

We use collected information to:

• Provide and operate the platform
• Manage user accounts
• Process payments and subscriptions
• Improve platform functionality
• Communicate with users
• Provide customer support
• Ensure platform security
• Comply with legal obligations

4. Legal Basis for Processing (POPIA)

In accordance with the Protection of Personal Information Act, we process personal information based on:

• User consent
• Performance of a contract
• Compliance with legal obligations
• Legitimate business interests

5. Sharing of Information

5.1 Service Providers

We may share information with third-party vendors that support our services, including:

• Payment processors (e.g., Paystack)
• Cloud hosting providers
• Analytics providers
• Customer support tools

5.2 Legal Authorities

We may disclose information if required to comply with applicable law, respond to legal processes, or protect rights and safety.

5.3 Business Transfers

If Pylon is involved in a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction.

6. International Data Transfers

Your information may be stored or processed outside South Africa. We take reasonable steps to ensure that such transfers comply with applicable data protection laws and that your data remains protected.

7. Data Retention

We retain personal information only as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. After account termination, data may be retained for a limited period before being securely deleted or anonymised.

8. Security

We implement appropriate technical and organisational measures to protect your data, including encryption, access controls, and secure infrastructure. However, no system is completely secure, and we cannot guarantee absolute security.

9. Your Rights (POPIA)

Under the Protection of Personal Information Act, you have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your data
• Object to processing
• Withdraw consent
• Lodge a complaint with a data protection authority

10. Cookies and Tracking

Pylon may use cookies and similar technologies to improve user experience, analyse platform usage, and store user preferences. Customers using Pylon are responsible for implementing appropriate cookie notices on their own websites where required by law.

11. Third-Party Services

Pylon may integrate with third-party services. We are not responsible for the privacy practices of these third parties. Users are encouraged to review their respective privacy policies before use.

12. Children's Privacy

Pylon is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Users will be notified of material changes via the email address associated with their account. Continued use of the platform constitutes acceptance of the updated policy.

14. Contact Information